Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: ZwOh1Xg2Ha1h1jrUodrWeZ+R0yhPPko0V9/+zSxY54U=
Subject key identifier: 43:DE:73:EE:8D:D1:B0:EA:1E:94:B9:23:6A:BB:55:99:D0:62:2D:BC
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 0198D65EFDD3CF9FBCEDF6AED187F2B8527E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 087F
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: CyARar8JJcJKbnQF+98b0RmI+ciqytCU8iQcvYiCSuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fd:d3:cf:9f:bc:ed:f6:ae:d1:87:f2:b8:52:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=43de73ee8dd1b0ea1e94b9236abb5599d0622dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:1b:35:b7:79:3e:6c:04:17:85:e7:b8:a5:
63:0e:d3:ab:17:ca:4e:26:22:f4:67:83:e7:3c:0c:
61:e6:73:f7:4f:87:a5:e7:2d:b7:ed:34:62:b8:be:
ff:2c:85:90:e7:7e:2a:40:41:15:dd:f6:64:eb:fe:
b5:dc:a0:12:03:84:dd:0f:cf:ec:00:96:fc:59:9d:
9c:c6:c0:8c:23:81:2c:39:2f:69:36:a5:6b:c8:76:
51:29:ea:2b:04:91:46:32:ad:99:3e:79:5a:24:8c:
08:a2:fa:f6:57:f4:d1:2d:92:f2:2c:b8:7b:ec:b2:
28:8a:95:67:c1:ed:be:f0:5f:d7:47:0d:d7:52:70:
b4:33:a8:ae:70:18:ad:d4:be:ab:75:03:58:dd:f3:
e9:5b:b6:2f:51:40:5b:42:01:bf:4d:39:50:a5:4c:
a0:6a:33:39:e2:eb:3e:91:e7:5c:46:ad:eb:62:f3:
52:0e:37:7d:b9:fe:af:61:9b:4c:8a:b0:1d:d9:b6:
5d:f6:55:e9:fc:4d:35:8d:5b:3a:44:5b:16:bb:99:
7d:dc:b5:6b:ed:e9:43:a4:d0:a1:80:33:f6:f0:87:
c6:9a:5b:5d:9e:78:0e:52:1a:c5:12:fc:6b:81:45:
20:ec:53:bc:5d:dc:5a:40:a3:bb:71:58:58:cf:7b:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:73:EE:8D:D1:B0:EA:1E:94:B9:23:6A:BB:55:99:D0:62:2D:BC
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:f8:24:36:bb:d3:4d:4a:8d:6c:da:a2:bf:64:d2:4a:d4:
f2:3d:5c:f1:0d:8b:12:9f:dc:8b:b4:cb:5b:d2:9d:6d:20:a3:
21:4a:8d:90:20:bc:90:b2:5f:52:8d:a1:ca:cc:52:90:d0:fd:
f3:ea:22:ff:a9:29:7d:83:7b:4c:c4:68:b7:75:a3:fa:4b:95:
b4:c5:7f:2b:89:79:df:75:2e:1a:72:0d:11:36:3e:ed:e1:e0:
0c:67:4b:f4:ce:45:a3:8c:80:73:13:32:b5:6b:31:03:7c:50:
ac:bb:aa:84:9a:af:e7:0f:0e:27:e1:b9:71:c1:54:a6:bc:a1:
6f:44:ca:4f:a5:eb:11:f6:ab:dc:3f:e3:98:98:d6:8d:fe:4e:
b4:e4:f8:73:e8:38:b7:de:ac:fb:0b:a8:b1:db:2d:61:04:a7:
af:12:35:77:b0:50:bf:c8:ac:90:80:f6:51:fa:17:fd:39:ba:
48:52:1f:0b:fd:82:f0:df:0c:8b:0f:13:88:52:4a:6d:39:ad:
c8:32:c8:54:eb:ae:ae:72:ba:10:bf:81:a6:64:28:9d:f7:9a:
8c:63:01:69:37:ef:03:f8:df:82:e5:fe:b1:2c:84:21:35:46:
bb:5b:7c:29:d1:c1:c0:eb:af:20:d6:11:c6:64:d8:11:9e:11:
81:8e:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:02 2025 by rpki-client